Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33392e302f32342d3234203d3e20323636303830.roa
File:                     34352e352e33392e302f32342d3234203d3e20323636303830.roa (raw, json)
Hash identifier:          W3I++zdijIxDngL3sQ8FJ4ybrLuYUUT6dm1Y0imP64U=
Subject key identifier:   0B:EC:80:DA:25:59:D6:03:AB:82:21:9D:8E:9E:9B:96:86:B7:BB:4F
Certificate issuer:       /CN=332114655712F86B1FFE277DAA3E55AC2887C145
Certificate serial:       38F8B8E1395FBFF18DB8E4065227EF5C6516456A
Authority key identifier: 33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33392e302f32342d3234203d3e20323636303830.roa
Signing time:             Fri 15 Sep 2023 12:42:13 +0000
ROA not before:           Fri 15 Sep 2023 12:37:13 +0000
ROA not after:            Fri 13 Sep 2024 12:42:13 +0000
asID:                     266080
IP address blocks:        45.5.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f8:b8:e1:39:5f:bf:f1:8d:b8:e4:06:52:27:ef:5c:65:16:45:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332114655712F86B1FFE277DAA3E55AC2887C145
        Validity
            Not Before: Sep 15 12:37:13 2023 GMT
            Not After : Sep 13 12:42:13 2024 GMT
        Subject: CN=0BEC80DA2559D603AB82219D8E9E9B9686B7BB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:7f:f2:4a:2f:f3:96:f4:ec:aa:e5:87:92:
                    4b:fe:95:40:86:12:6f:f7:ca:10:e6:53:1a:56:9f:
                    6f:77:71:49:75:b9:ac:77:cc:e9:70:cd:33:f3:dd:
                    80:db:1b:b5:9e:62:4a:cf:0e:30:19:d7:31:8a:b5:
                    f0:51:2e:64:eb:7c:09:93:57:d1:d6:0c:0b:5b:de:
                    b3:3c:46:50:bf:e9:43:81:a2:4f:37:1e:25:fa:1a:
                    31:e2:0c:f0:e6:57:b7:36:24:8b:f0:9c:12:6a:64:
                    93:ef:62:5c:01:26:20:91:99:7a:e4:e4:60:fb:05:
                    38:a0:af:30:7e:7a:51:fd:37:c6:86:19:42:03:54:
                    ce:e8:57:3f:7a:11:2b:89:80:5b:b2:b9:47:2d:10:
                    47:f5:fd:97:cd:eb:ce:f7:cb:19:6b:73:39:f6:d3:
                    ec:f5:c3:20:2c:81:09:58:09:e9:0b:70:29:45:c6:
                    be:34:b4:9d:ed:bd:ea:34:45:69:7c:5a:13:ff:ad:
                    9a:16:9d:27:da:ac:a8:b3:8f:0a:e9:82:09:02:06:
                    dd:2e:b1:f0:f1:db:b5:dd:1a:bc:95:c2:28:20:0a:
                    91:c0:4e:ab:9c:08:cc:f5:d4:88:a9:22:5c:5a:b6:
                    de:2a:30:d0:c4:a4:c8:34:33:35:e0:51:97:7f:dc:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:80:DA:25:59:D6:03:AB:82:21:9D:8E:9E:9B:96:86:B7:BB:4F
            X509v3 Authority Key Identifier:
                keyid:33:21:14:65:57:12:F8:6B:1F:FE:27:7D:AA:3E:55:AC:28:87:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/332114655712F86B1FFE277DAA3E55AC2887C145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332114655712F86B1FFE277DAA3E55AC2887C145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ8FRv58xpvtEgbHJREJUbneeeSfdKsPJHDZTvhnkxjg/0/34352e352e33392e302f32342d3234203d3e20323636303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:c3:3f:8e:0f:c9:a6:36:ea:07:05:b2:6f:9a:82:43:9b:
         09:e2:6b:6d:a8:b2:72:48:8b:da:9a:51:bb:55:7d:c9:22:10:
         4b:82:37:bb:4b:85:4b:1a:20:fb:89:b1:ae:2f:8a:4c:68:95:
         3d:6b:ae:ed:7c:1d:2a:d5:65:bf:30:79:36:72:d7:d6:d7:93:
         22:73:96:c4:a0:da:83:be:f7:da:9b:b4:a8:c8:83:bb:de:d6:
         2c:23:26:9e:3e:d5:6b:22:37:09:ca:9f:79:01:08:35:ce:b7:
         9a:2b:34:f7:82:f5:f3:87:c7:11:cc:22:fd:48:1e:2a:24:94:
         c8:4e:3c:e4:e5:0a:8c:8e:90:1c:46:28:82:d3:b3:0e:6b:88:
         b4:fe:9b:40:64:0e:5a:ff:46:64:52:c3:f8:d9:8a:f6:a6:45:
         3d:23:b3:30:a0:ba:a6:80:b3:7a:26:f5:ba:7a:6d:54:f7:70:
         e1:f1:c4:47:b4:1c:16:53:3f:db:ef:69:b8:ed:07:eb:c1:9b:
         ff:38:1b:f7:36:f8:7c:6e:cb:f1:13:69:96:be:78:4a:dd:ba:
         4d:56:1a:e1:35:9b:a4:3c:81:83:53:c8:d3:87:33:99:e4:4d:
         00:81:0f:dc:aa:14:fd:eb:e7:17:01:11:8c:f9:4b:62:55:4d:
         13:81:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org